Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
File: MksgMsOPsX9C-IMqTCHh8NXxnuA.mft (raw, json)
Hash identifier: tGKvTArV0ZrOcDN8nFtBWtextBKT8RNlEurE4gLZI2o=
Subject key identifier: 48:5E:76:F8:38:E8:AD:EB:E0:EC:86:49:F0:4F:B2:70:03:4A:CE:86
Authority key identifier: 32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
Certificate issuer: /CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Certificate serial: 0197B8213D19D1DDCD088CD5B3C7DC10E225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
Manifest number: 025B
Signing time: Sat 28 Jun 2025 20:01:15 +0000
Manifest this update: Sat 28 Jun 2025 20:01:15 +0000
Manifest next update: Sun 29 Jun 2025 20:01:15 +0000
Files and hashes: 1: 1-5n0KWaGHCDQYhl2aLfMjhVyMRI.roa (hash: KATmxtMp2ikC0o4XIGyQU9bJkWtT8ILR3+Dm38ZRLnA=)
2: MksgMsOPsX9C-IMqTCHh8NXxnuA.crl (hash: FrmmFbIzXXUisSGbQ3YZXge3g0m2ifMBFVouahxAgLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:3d:19:d1:dd:cd:08:8c:d5:b3:c7:dc:10:e2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324b2032c38fb17f42f8832a4c21e1f0d5f19ee0
Validity
Not Before: Jun 28 20:01:15 2025 GMT
Not After : Jun 29 20:01:15 2025 GMT
Subject: CN=485e76f838e8adebe0ec8649f04fb270034ace86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:77:9b:f4:3a:5a:c2:f3:5c:11:61:a8:20:c3:
81:8f:13:b9:2b:f3:09:ad:ff:6d:9f:28:0c:5e:f8:
f0:61:dd:fa:c6:39:aa:9c:1f:c5:a1:f0:9b:b5:4b:
e2:45:ec:b3:bf:36:85:e5:6d:8c:70:a6:c3:62:05:
15:55:0a:33:69:a6:73:17:64:5c:a5:43:f3:d2:a1:
34:5d:57:74:b7:1a:ef:67:15:41:d5:6e:bd:e5:c4:
03:99:f0:cb:8f:14:ba:25:89:c9:a1:6e:71:53:25:
44:53:67:eb:cd:18:06:6e:0c:29:83:5e:50:39:a0:
13:a1:e4:ba:fa:10:21:8a:41:d5:61:94:72:97:7c:
9b:9f:1e:8a:8c:8b:a0:dd:90:dd:76:64:62:29:42:
7d:cf:7c:65:0f:60:d5:4d:0b:0c:1e:ab:8f:5d:60:
3e:f3:56:3b:5a:5e:69:16:50:ac:da:c8:ca:a1:c8:
bf:2e:07:95:f5:5d:45:49:7c:4c:83:97:9e:f5:e6:
31:4f:3c:5c:fb:bb:74:a1:4c:b2:69:9b:69:d6:9e:
af:71:4a:d1:35:6c:f3:60:97:1e:2c:c0:9d:97:01:
a3:9c:0c:40:e2:02:15:05:c4:2d:92:07:9d:d3:ea:
05:5f:e7:60:48:e9:af:4a:18:cf:89:28:57:d1:8a:
9a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:5E:76:F8:38:E8:AD:EB:E0:EC:86:49:F0:4F:B2:70:03:4A:CE:86
X509v3 Authority Key Identifier:
keyid:32:4B:20:32:C3:8F:B1:7F:42:F8:83:2A:4C:21:E1:F0:D5:F1:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MksgMsOPsX9C-IMqTCHh8NXxnuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/79ebc6-617b-4ea9-b453-4360ee06a22c/1/MksgMsOPsX9C-IMqTCHh8NXxnuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e6:65:42:3c:b7:06:d0:39:be:13:07:f9:92:3f:50:cb:0a:
d4:82:c0:61:33:39:56:a3:c8:85:3f:85:b5:17:e6:c8:61:9f:
79:87:31:83:94:d5:2c:50:0e:17:39:66:7d:8b:0a:45:b0:cb:
9f:25:07:55:91:d3:7d:8b:c3:52:a1:83:7a:95:8e:86:a2:e1:
2c:b3:6c:d2:0a:48:4b:3d:32:27:0e:0c:39:39:a3:74:8a:c2:
40:f3:5a:b4:18:63:6e:b4:cc:09:a5:b6:a1:5c:a6:4b:dd:71:
d9:ef:ed:4e:94:5c:a2:86:f2:91:8c:0c:ae:9b:df:6e:ea:05:
72:3e:96:b9:5b:6a:dc:74:e0:b2:f3:f0:d1:b1:7d:9c:e9:c4:
19:22:fe:d6:70:f5:58:73:ca:37:b0:5d:f9:5f:b9:57:ff:b1:
a3:43:d8:0f:d3:c9:8c:d3:1b:af:89:63:58:10:b0:15:62:1f:
43:59:dd:83:17:bc:cd:04:86:9b:2f:06:81:d2:bf:85:04:74:
b8:37:65:db:e2:10:05:93:90:b1:fc:fc:09:c3:36:93:1f:0a:
93:39:df:c8:9c:9e:a1:a7:e4:25:f2:e5:9a:19:61:df:fa:81:
7a:91:39:7f:9b:59:1a:c8:29:a3:aa:97:14:d8:38:b8:74:95:
d3:fa:48:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:06:13 2025 by rpki-client